[Sussex] Hacked server

[John Crowhurst]

On Thu, January 25, 2007 09:59, Brendan Whelan wrote:
> Hi,
>
> Overnight someone has hacked into one of our servers which is hosted by an
> ISP. They have modified httpd.conf, clear out the logs and blocked the
> creation of files. The server needs to be rebuilt but I would like to
> extract the latest data from the databases but I can't create files.

Install (or get your ISP to install) a new hard drive as the master and
mount this disk to work on it. You have no idea what the hacker has
compromised on the server, so its better to be safe and start with a clean
build.

--
John